Side Menu Lite < 2.2.6 - Authenticated SQL Injection
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.4%
exploitation probability
1.4%top 31% of all CVEs
observed exploitation
nono source reports it
The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in SQL statement, leading to a SQL Injection issue
Affected products
Unknown · Side Menu Lite - add sticky fixed buttons